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AMENDMENTS IN THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
LISTING OF THE CLAIMS: 

1 . (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and network infrastructure, the method comprising the steps of: 

a. obtaining information associated with the network system; 

b. setting one or more static policies for network services usage by the attached 
function; 

c. setting one or more dynamic policies for network services usage by the attached 
function; 

d. monitoring the network system for triggers; and 

e. modifying by one or more devices of the network infrastructure the static policies, 
the dynamic policies, or both for the attached function based upon the detection of 
one or more monitor e d triggers. 



2. (Original) The method as claimed in Claim 1 further comprising the step of saving set and 
modified policies associated with the attached function as policy history for the attached 
function. 



3. (Original) The method as claimed in Claim 2 further comprising the step of querying 
whether a policy history exists for the attached function after obtaining the information from the 
network system. 

4. (Original) The method as claimed in Claim 2 wherein the step of saving the set and modified 
policies associated with the attached function includes the step of caching some or all of the 
policy history in a network system device. 
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5. (Original) The method as claimed in Claim 4 further comprising the step of invalidating the 
cached policy history based upon the occurrence of a specified event. 

6. (Original) The method as claimed in Claim 5 wherein the specified event is selected from 
the group consisting of time, size limitations, storage limits, a policy change, or a network 
system change. 

7. (Original) The method as claimed in Claim 2 further comprising the step of evaluating 
whether the policy history includes any static policies that may be set for the attached function in 
a current session. 

8. (Original) The method as claimed in Claim 1 wherein the triggers include timeouts, attached 
function changes, network infrastructure changes, intrusion detection events, firewall events, 
administrator inputs, network service changes and network service change requests. 

9. (Original) The method as claimed in Claim 1 wherein the information includes attached 
function information, access device information, access port, number of devices per port, priority 
per port, priority per application, priority per device, application requested, exchange protocols 
available, port security, access location, and access time. 

1 0. (Original) The method as claimed in Claim 1 wherein the only static policy is that there are 
only dynamic policies. 

1 1 . (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and network infrastructure, the method comprising the steps of: 

a. obtaining information associated with the network system; 

b. setting one or more dynamic policies for network services usage by the attached 
function; 

c. monitoring the network system for triggers; and 
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d. modifying bv one or more devices of the network infrastructure the dynamic 
policies for the attached function based upon the detection of one or more 
monitor e d triggers. 

12. (Original) The method as claimed in Claim 1 1 further comprising the step of saving set and 
modified policies associated with the attached function as policy history for the attached 
function. 

13. (Original) The method as claimed in Claim 12 further comprising the step of querying 
whether a policy history exists for the attached function after obtaining the information from the 
network system. 

14. (Original) The method as claimed in Claim 12 wherein the step of saving the set and 
modified policies associated with the attached function includes the step of caching the policy 
history in a network system device. 

1 5. (Original) The method as claimed in Claim 14 further comprising the step of invalidating the 
cached policy history based upon the occurrence of a specified event. 

16. (Original) The method as claimed in Claim 15 wherein the specified event is selected from 
the group consisting of time, size limitations, storage limits, a policy change, or a network 
system change. 

1 7. (Original) The method as claimed in Claim 1 1 wherein the triggers include timeouts, 
attached function changes, network infrastructure changes, intrusion detection events, firewall 
events, administrator inputs, network service changes and network service change requests. 

1 8. (Currently amended) A system to control the usage by an attached function of network 
services associated with a network system that includes the attached function, one or more other 
attached functions and network infrastructure, the system comprising: 
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a. means, forming part of the network system, for obtaining information associated 
with the network system; and 

b. a dynamic policy function module of the network infrastructure for setting static 
and dynamic policies for the attached function, for monitoring the network system 
for triggers, and for modifying the static policies, the dynamic policies, or both for 
the attached function based upon the detection of one or more monitor e d triggers. 

19. (Original) The system as claimed in Claim 18 wherein the dynamic policy function module 
is a centralized module of a policy server of the network infrastructure. 

20. (Original) The system as claimed in Claim 18 further comprising means for saving set and 
modified policies history. 

21 . (Original) The system as claimed in Claim 20 wherein the means for storing set and 
modified policies history forms part of the policy server of the network infrastructure. 

22. (Original) The system as claimed in Claim 20 wherein the means for storing set and 
modified policies forms part of an interconnection device of the network infrastructure. 

23. (Original) The system as claimed in Claim 18 wherein the dynamic policy function module 
is a distributed module forming portions of two or more devices of the network infrastructure. 

24. (Original) The system as claimed in Claim 23 wherein the two or more devices are selected 
from a combination of one or more servers and one or more interconnection devices or a 
combination of two or more interconnection devices. 

25. (Original) The system as claimed in Claim 20 wherein the means for saving set and modified 
policies includes means for caching the set and modified policies on a centralized network 
device, a local network device, or a combination of a centralized network device and a local 
network device. 
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26. (Original) The system as claimed in Claim 1 8 wherein the means for obtaining information 
associated with the network system includes IEEE 802. IX authentication, RADIUS 
authentication, or a combination of IEEE 802. IX authentication and RADIUS authentication of 
the attached function. 

27. (Currently amended) A system to control the usage by an attached function of network 
services of a network system that includes the attached function, one or more other attached 
functions and network infrastructure, the system comprising: 

a. means, forming part of the network system, for obtaining information associated 
with the network system; and 

b. a dynamic policy function module of the network infrastructure for setting 
dynamic policies for network services usage by the attached function, for 
monitoring the network system for triggers, and for modifying the dynamic 
policies for the attached function based upon the detection of one or more 
monitor e d triggers. 

28. (Original) The system as claimed in Claim 27 wherein the dynamic policy function module 
is a centralized module of a policy server of the network infrastructure. 

29. (Original) The system as claimed in Claim 27 further comprising means for saving set and 
modified policies history. 

30. (Original) The system as claimed in Claim 27 wherein the dynamic policy function module 
is a distributed module forming portions of two or more network devices of the network 
infrastructure. 

3 1 . (Original) The system as claimed in Claim 27 further comprising means for caching set and 
modified policies history on one or more local network devices of the network infrastructure. 

32. (Currently amended) A system to control the usage by an attached function of network 
services associated with a network system that includes the attached function, one or more other 
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attached functions and network infrastructure, based on one or more usage policies assigned to 
the attached function, the system comprising means for saving information about the one or more 
usage the assigned policies assigned to the attached function on a network device of the network 
infrastructure. 

33. (Original) The system as claimed in Claim 32 wherein the means for saving the assigned 
policies is a distributed module forming portions of two or more devices of the network 
infrastructure. 

34. (Currently amended) A system to control the usage by an attached function of network 
services associated with a network system that includes the attached function, one or more other 
attached functions and network infrastructure, based on dynamic policies assigned to the 
attached function, the system comprising means for saving on one or more devices of the 
network infrastructure information about the assign e d dynamic policies assigned to the attached 
function as policies histories. 

35. (Original) The system as claimed in Claim 34 wherein the policies histories are saved on a 
policy server of the network infrastructure. 

36. (Original) The system as claimed in Claim 34 wherein the policies histories are saved on one 
or more local network devices of the network infrastructure. 

37. (Currently amended) A system to control usage by an attached function of network 
services associated with a network system that includes the attached function, one or more other 
attached functions and network infrastructure, based on one or more usage policies assigned to 
the attached function, the system comprising means for caching on one or more devices of the 
network infrastructure the assign e d usage policies assigned to the attached function as policies 
histories. 

38. (Original) The system as claimed in Claim 37 further comprising means for invalidating one 
or more of the cached policies histories based on a specified event. 
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39. (Original) The system as claimed in Claim 38 wherein the specified event is selected fi-om 
the group consisting of time, size limitations, storage limits, a policy change, or a network 
system change. 

40. (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and network infrastructure, the method comprising the steps of: 

a. setting one or more policies for network services usage by the attached function; 

b. saving the one or more policies set as policies histories; 

c. monitoring the policies histories for triggers; and 

d. modifying by one or more devices of the network infrastructure the policies for 
the attached function based upon the detection of one or more policy history 
monitor e d triggers. 
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